@camstack/system 1.2.207 → 1.2.209

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CEUwB91M.js");
+const require_dist = require("../../dist-CNxDnJwz.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-pages-aggregator/addon-pages-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Jt as BaseAddon, bn as EventCategory, k as addonPagesCapability, qt as errMsg } from "../../dist-BTJq0ddi.mjs";
+import { Jt as BaseAddon, bn as EventCategory, k as addonPagesCapability, qt as errMsg } from "../../dist-CLFBZQH6.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CEUwB91M.js");
+const require_dist = require("../../dist-CNxDnJwz.js");
 const require_settle_sources = require("../../settle-sources-Bhsy57y-.js");
 let node_crypto = require("node:crypto");
 let node_path = require("node:path");

package/dist/builtins/addon-widgets-aggregator/addon-widgets-aggregator.addon.mjs

@@ -1,4 +1,4 @@
-import { Jt as BaseAddon, bn as EventCategory, j as addonWidgetsCapability, qt as errMsg } from "../../dist-BTJq0ddi.mjs";
+import { Jt as BaseAddon, bn as EventCategory, j as addonWidgetsCapability, qt as errMsg } from "../../dist-CLFBZQH6.mjs";
 import { t as settleSourcesWithTimeout } from "../../settle-sources-CDtNC8ub.mjs";
 import { createHash, randomUUID } from "node:crypto";
 import * as path$1 from "node:path";

package/dist/builtins/alerts/alerts.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CEUwB91M.js");
+const require_dist = require("../../dist-CNxDnJwz.js");
 //#region src/builtins/alerts/prune-policy.ts
 /**
 * Ids older than `cutoffMs`, oldest first.

package/dist/builtins/alerts/alerts.addon.mjs

@@ -1,4 +1,4 @@
-import { Jt as BaseAddon, M as alertsCapability, bn as EventCategory, n as AlertSchema, qt as errMsg, sn as createEvent } from "../../dist-BTJq0ddi.mjs";
+import { Jt as BaseAddon, M as alertsCapability, bn as EventCategory, n as AlertSchema, qt as errMsg, sn as createEvent } from "../../dist-CLFBZQH6.mjs";
 //#region src/builtins/alerts/prune-policy.ts
 /**
 * Ids older than `cutoffMs`, oldest first.

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CEUwB91M.js");
+const require_dist = require("../../dist-CNxDnJwz.js");
 let node_crypto = require("node:crypto");
 let buffer = require("buffer");
 let node_fs_promises = require("node:fs/promises");

package/dist/builtins/backup-orchestrator/backup-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Bt as storageOccupancyCapability, Jt as BaseAddon, P as backupCapability, bn as EventCategory, yt as mayWriteToLocation } from "../../dist-BTJq0ddi.mjs";
+import { Bt as storageOccupancyCapability, Jt as BaseAddon, P as backupCapability, bn as EventCategory, yt as mayWriteToLocation } from "../../dist-CLFBZQH6.mjs";
 import { randomBytes, randomUUID } from "node:crypto";
 import { Buffer as Buffer$1 } from "buffer";
 import * as fsp from "node:fs/promises";

package/dist/builtins/console-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CEUwB91M.js");
+const require_dist = require("../../dist-CNxDnJwz.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/console-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Jt as BaseAddon, ht as logDestinationCapability } from "../../dist-BTJq0ddi.mjs";
+import { Jt as BaseAddon, ht as logDestinationCapability } from "../../dist-CLFBZQH6.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/console-logging/console-destination.ts
 var LEVEL_RANK = {

package/dist/builtins/core-blocks/core-blocks.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CEUwB91M.js");
+const require_dist = require("../../dist-CNxDnJwz.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 node_fs_promises = require_chunk.__toESM(node_fs_promises);

package/dist/builtins/core-blocks/core-blocks.addon.mjs

@@ -1,4 +1,4 @@
-import { B as coreBlockIdFromAddonId, Jt as BaseAddon, V as coreBlocksCapability, c as CORE_BLOCK_ADDON_PREFIX, d as DeclaredDevices, l as CoreBlockSchema, qt as errMsg, s as CORE_BLOCKS_ADDON_ID, z as coreBlockAddonId } from "../../dist-BTJq0ddi.mjs";
+import { B as coreBlockIdFromAddonId, Jt as BaseAddon, V as coreBlocksCapability, c as CORE_BLOCK_ADDON_PREFIX, d as DeclaredDevices, l as CoreBlockSchema, qt as errMsg, s as CORE_BLOCKS_ADDON_ID, z as coreBlockAddonId } from "../../dist-CLFBZQH6.mjs";
 import { randomUUID } from "node:crypto";
 import * as fs from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/device-manager/device-manager.addon.js

@@ -3,8 +3,8 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CEUwB91M.js");
-const require_retired_settings_keys = require("../../retired-settings-keys-DtPZcaQ_.js");
+const require_dist = require("../../dist-CNxDnJwz.js");
+const require_retired_settings_keys = require("../../retired-settings-keys-D9wnrXOC.js");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");
 //#region src/builtins/device-manager/adoption-job-engine.ts

package/dist/builtins/device-manager/device-manager.addon.mjs

@@ -1,5 +1,5 @@
-import { $t as DeviceRole, G as deviceManagerCapability, Jt as BaseAddon, K as deviceStateCapability, L as buildStreamParamsConfigSchema, Mt as runtimeStatePolicyFor, Qt as DeviceFeature, S as STREAM_PROFILE_META, St as normalizeUnit, X as enumerateItemArrayFields, Z as enumerateSchemaFields, a as CAMERA_SWITCH_ORDER, bn as EventCategory, en as DeviceType, f as DeviceStatusSchema, fn as isDeviceConfigCap, kt as resolveContainerPrimaryChild, o as CAP_NAMES_WITH_STATUS, q as deviceStatusCapability, qt as errMsg, rn as WELL_KNOWN_TAB_MAP, t as ALL_CAPABILITY_DEFINITIONS, wt as parseStreamParamsFormPatch, yn as sleep } from "../../dist-BTJq0ddi.mjs";
-import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-BZZPFp77.mjs";
+import { $t as DeviceRole, G as deviceManagerCapability, Jt as BaseAddon, K as deviceStateCapability, L as buildStreamParamsConfigSchema, Mt as runtimeStatePolicyFor, Qt as DeviceFeature, S as STREAM_PROFILE_META, St as normalizeUnit, X as enumerateItemArrayFields, Z as enumerateSchemaFields, a as CAMERA_SWITCH_ORDER, bn as EventCategory, en as DeviceType, f as DeviceStatusSchema, fn as isDeviceConfigCap, kt as resolveContainerPrimaryChild, o as CAP_NAMES_WITH_STATUS, q as deviceStatusCapability, qt as errMsg, rn as WELL_KNOWN_TAB_MAP, t as ALL_CAPABILITY_DEFINITIONS, wt as parseStreamParamsFormPatch, yn as sleep } from "../../dist-CLFBZQH6.mjs";
+import { n as purgeRetiredSettingsRows } from "../../retired-settings-keys-BQydEL_M.mjs";
 import { randomUUID } from "node:crypto";
 import { canonicalDeviceFingerprint } from "@camstack/types/node";
 //#region src/builtins/device-manager/adoption-job-engine.ts

package/dist/builtins/doorbell/virtual-doorbell.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CEUwB91M.js");
+const require_dist = require("../../dist-CNxDnJwz.js");
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/doorbell/virtual-doorbell.addon.mjs

@@ -1,4 +1,4 @@
-import { F as bareAddonId, J as doorbellCapability, Jt as BaseAddon, Q as evaluateSensorEdge, b as SOURCE_DEVICE_TYPES, bn as EventCategory, ct as isSameAddonId, en as DeviceType, lt as isSourceCap, qt as errMsg, sn as createEvent, y as SOURCE_CAPS } from "../../dist-BTJq0ddi.mjs";
+import { F as bareAddonId, J as doorbellCapability, Jt as BaseAddon, Q as evaluateSensorEdge, b as SOURCE_DEVICE_TYPES, bn as EventCategory, ct as isSameAddonId, en as DeviceType, lt as isSourceCap, qt as errMsg, sn as createEvent, y as SOURCE_CAPS } from "../../dist-CLFBZQH6.mjs";
 //#region src/builtins/doorbell/trigger-engine.ts
 /**
 * Pure trigger logic for the virtual-doorbell builtin — edge detection over

package/dist/builtins/hub-forwarder/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CEUwB91M.js");
+const require_dist = require("../../dist-CNxDnJwz.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/hub-forwarder/index.mjs

@@ -1,4 +1,4 @@
-import { Jt as BaseAddon, ht as logDestinationCapability } from "../../dist-BTJq0ddi.mjs";
+import { Jt as BaseAddon, ht as logDestinationCapability } from "../../dist-CLFBZQH6.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 //#region src/builtins/hub-forwarder/hub-forwarder-destination.ts
 var DEFAULT_OUTBOUND_BUFFER_SIZE = 500;

package/dist/builtins/liveness-monitor/liveness-monitor.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CEUwB91M.js");
+const require_dist = require("../../dist-CNxDnJwz.js");
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/liveness-monitor/liveness-monitor.addon.mjs

@@ -1,4 +1,4 @@
-import { Jt as BaseAddon, bn as EventCategory, qt as errMsg, sn as createEvent, v as RecordingStatusSchema } from "../../dist-BTJq0ddi.mjs";
+import { Jt as BaseAddon, bn as EventCategory, qt as errMsg, sn as createEvent, v as RecordingStatusSchema } from "../../dist-CLFBZQH6.mjs";
 //#region src/builtins/liveness-monitor/liveness-checks.ts
 var NO_DEVICES = "liveness:no-devices";
 var ALL_OFFLINE = "liveness:all-devices-offline";

package/dist/builtins/local-auth/local-auth.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CEUwB91M.js");
+const require_dist = require("../../dist-CNxDnJwz.js");
 let node_crypto = require("node:crypto");
 node_crypto = require_chunk.__toESM(node_crypto);
 let crypto$1 = require("crypto");

package/dist/builtins/local-auth/local-auth.addon.mjs

@@ -1,5 +1,5 @@
 import { i as __require, o as __toESM, t as __commonJSMin } from "../../chunk-CNf5ZN-e.mjs";
-import { C as ScopedTokenSchema, Jt as BaseAddon, N as authProviderCapability, O as UserRecordSchema, Ut as userManagementCapability, r as ApiKeyRecordSchema } from "../../dist-BTJq0ddi.mjs";
+import { C as ScopedTokenSchema, Jt as BaseAddon, N as authProviderCapability, O as UserRecordSchema, Ut as userManagementCapability, r as ApiKeyRecordSchema } from "../../dist-CLFBZQH6.mjs";
 import * as crypto$2 from "node:crypto";
 import { createHash, randomUUID, timingSafeEqual } from "node:crypto";
 import nodeCrypto from "crypto";

package/dist/builtins/local-network/local-network.addon.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CEUwB91M.js");
+const require_dist = require("../../dist-CNxDnJwz.js");
 const require_tls = require("../../tls-BxQlomxd.js");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");

package/dist/builtins/local-network/local-network.addon.mjs

@@ -1,4 +1,4 @@
-import { Jt as BaseAddon, bn as EventCategory, mt as localNetworkCapability } from "../../dist-BTJq0ddi.mjs";
+import { Jt as BaseAddon, bn as EventCategory, mt as localNetworkCapability } from "../../dist-CLFBZQH6.mjs";
 import { S as readLanHttpState, _ as DEFAULT_LAN_HTTP_PORT, a as writeTlsMode, i as writeExtraSans, l as reissueTlsLeaf, n as readTlsAccessStatus, o as validateUploadedTls, r as readTlsMode, s as ensureTlsCert, t as readExtraSans, y as applyLanHttp } from "../../tls-DOTmtLCW.mjs";
 import { mkdir, writeFile } from "node:fs/promises";
 import { join } from "node:path";

package/dist/builtins/loki-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CEUwB91M.js");
+const require_dist = require("../../dist-CNxDnJwz.js");
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/loki-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Jt as BaseAddon, ht as logDestinationCapability } from "../../dist-BTJq0ddi.mjs";
+import { Jt as BaseAddon, ht as logDestinationCapability } from "../../dist-CLFBZQH6.mjs";
 //#region src/builtins/loki-logging/loki-payload.ts
 /**
 * Loki rejects a label name that is not a valid Prometheus label

package/dist/builtins/native-metrics/native-metrics.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CEUwB91M.js");
+const require_dist = require("../../dist-CNxDnJwz.js");
 let node_fs_promises = require("node:fs/promises");
 let node_child_process = require("node:child_process");
 let node_util = require("node:util");

package/dist/builtins/native-metrics/native-metrics.addon.mjs

@@ -1,4 +1,4 @@
-import { Dt as reducePoints, Jt as BaseAddon, Ot as resolveBucketMs, bn as EventCategory, bt as metricsProviderCapability, nt as foldSnapshotByFunction, qt as errMsg, sn as createEvent } from "../../dist-BTJq0ddi.mjs";
+import { Dt as reducePoints, Jt as BaseAddon, Ot as resolveBucketMs, bn as EventCategory, bt as metricsProviderCapability, nt as foldSnapshotByFunction, qt as errMsg, sn as createEvent } from "../../dist-CLFBZQH6.mjs";
 import { readFile, readdir } from "node:fs/promises";
 import { execFile, execFileSync } from "node:child_process";
 import { promisify } from "node:util";

package/dist/builtins/platform-probe/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CEUwB91M.js");
+const require_dist = require("../../dist-CNxDnJwz.js");
 let node_child_process = require("node:child_process");
 let node_util = require("node:util");
 let node_fs = require("node:fs");

package/dist/builtins/platform-probe/index.mjs

@@ -1,5 +1,5 @@
 import { o as __toESM } from "../../chunk-CNf5ZN-e.mjs";
-import { Ft as scoreRuntimes, Jt as BaseAddon, Tt as platformProbeCapability, Y as enumerateInferenceDevices, bn as EventCategory, ln as emitReadiness, qt as errMsg } from "../../dist-BTJq0ddi.mjs";
+import { Ft as scoreRuntimes, Jt as BaseAddon, Tt as platformProbeCapability, Y as enumerateInferenceDevices, bn as EventCategory, ln as emitReadiness, qt as errMsg } from "../../dist-CLFBZQH6.mjs";
 import { execFile } from "node:child_process";
 import { promisify } from "node:util";
 import * as fs from "node:fs";

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CEUwB91M.js");
+const require_dist = require("../../dist-CNxDnJwz.js");
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/remote-access-orchestrator/remote-access-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { Jt as BaseAddon, bn as EventCategory } from "../../dist-BTJq0ddi.mjs";
+import { Jt as BaseAddon, bn as EventCategory } from "../../dist-CLFBZQH6.mjs";
 //#region src/builtins/remote-access-orchestrator/enabled-providers-reconcile.ts
 /**
 * Reconcile the durable `enabledProviders` set against authoritative

package/dist/builtins/snapshot/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CEUwB91M.js");
+const require_dist = require("../../dist-CNxDnJwz.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
 let _camstack_types_node = require("@camstack/types/node");

package/dist/builtins/snapshot/index.mjs

@@ -1,4 +1,4 @@
-import { F as bareAddonId, Ht as streamQualityLabel, I as batteryCapability, Jt as BaseAddon, Lt as snapshotCapability, Qt as DeviceFeature, W as deriveBatteryPresence, bn as EventCategory, en as DeviceType, i as BatteryStatusSchema, pn as nodePin, qt as errMsg } from "../../dist-BTJq0ddi.mjs";
+import { F as bareAddonId, Ht as streamQualityLabel, I as batteryCapability, Jt as BaseAddon, Lt as snapshotCapability, Qt as DeviceFeature, W as deriveBatteryPresence, bn as EventCategory, en as DeviceType, i as BatteryStatusSchema, pn as nodePin, qt as errMsg } from "../../dist-CLFBZQH6.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
 import { signExpiringUrl, verifyExpiringUrl } from "@camstack/types/node";

package/dist/builtins/sqlite-storage/filesystem-storage.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CEUwB91M.js");
+const require_dist = require("../../dist-CNxDnJwz.js");
 let node_crypto = require("node:crypto");
 let node_fs_promises = require("node:fs/promises");
 let node_path = require("node:path");

package/dist/builtins/sqlite-storage/filesystem-storage.addon.mjs

@@ -1,4 +1,4 @@
-import { Jt as BaseAddon, Vt as storageProviderCapability, tt as filesystemBrowseCapability } from "../../dist-BTJq0ddi.mjs";
+import { Jt as BaseAddon, Vt as storageProviderCapability, tt as filesystemBrowseCapability } from "../../dist-CLFBZQH6.mjs";
 import { randomUUID } from "node:crypto";
 import { mkdir, readdir, realpath, statfs } from "node:fs/promises";
 import * as path$1 from "node:path";

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CEUwB91M.js");
+const require_dist = require("../../dist-CNxDnJwz.js");
 const require_hub_cap_forward = require("../../hub-cap-forward-DmHNjbB0.js");
 let zod = require("zod");
 let node_crypto = require("node:crypto");
@@ -3292,7 +3292,7 @@ var StorageOrchestratorAddon = class extends require_dist.BaseAddon {
 				return Promise.all(rows.map(async (loc) => ({
 					...this.redacted(loc),
 					...this.occupancy.ownedFor(loc.id) !== void 0 ? { owned: this.occupancy.ownedFor(loc.id) } : {},
-					capacity: require_dist.isLocationEnabled(loc) ? await this.localCapacityOf(loc) : null
+					capacity: require_dist.mayReadLocation(loc) ? await this.localCapacityOf(loc) : null
 				})));
 			},
 			listLocationDeclarations: async () => service.listDeclarations(),

package/dist/builtins/storage-orchestrator/storage-orchestrator.addon.mjs

@@ -1,4 +1,4 @@
-import { $ as evictionPolicyOfLocation, At as resolveLocationMode, D as StorageMigrationJobSchema, E as StorageLocationTypeSchema, It as settingsStoreCapability, Jt as BaseAddon, Kt as withLocationMode, R as collectSecretConfigKeys, Rt as storageCapability, T as StorageLocationModeSchema, bn as EventCategory, ft as legacyModeOf, g as REDACTED_SECRET, m as LegacyStorageLocationDefaultSchema, mn as parseJsonObject, ot as isLocationEnabled, rt as gbToBytes, vt as mayReadLocation, w as StorageCleanupJobSchema, xt as modeMayWrite, yt as mayWriteToLocation, zt as storageMigrationCapability } from "../../dist-BTJq0ddi.mjs";
+import { $ as evictionPolicyOfLocation, At as resolveLocationMode, D as StorageMigrationJobSchema, E as StorageLocationTypeSchema, It as settingsStoreCapability, Jt as BaseAddon, Kt as withLocationMode, R as collectSecretConfigKeys, Rt as storageCapability, T as StorageLocationModeSchema, bn as EventCategory, ft as legacyModeOf, g as REDACTED_SECRET, m as LegacyStorageLocationDefaultSchema, mn as parseJsonObject, ot as isLocationEnabled, rt as gbToBytes, vt as mayReadLocation, w as StorageCleanupJobSchema, xt as modeMayWrite, yt as mayWriteToLocation, zt as storageMigrationCapability } from "../../dist-CLFBZQH6.mjs";
 import { t as HUB_CAP_FWD_ACTION } from "../../hub-cap-forward-BdT320dq.mjs";
 import { z } from "zod";
 import { randomUUID } from "node:crypto";
@@ -3287,7 +3287,7 @@ var StorageOrchestratorAddon = class extends BaseAddon {
 				return Promise.all(rows.map(async (loc) => ({
 					...this.redacted(loc),
 					...this.occupancy.ownedFor(loc.id) !== void 0 ? { owned: this.occupancy.ownedFor(loc.id) } : {},
-					capacity: isLocationEnabled(loc) ? await this.localCapacityOf(loc) : null
+					capacity: mayReadLocation(loc) ? await this.localCapacityOf(loc) : null
 				})));
 			},
 			listLocationDeclarations: async () => service.listDeclarations(),

package/dist/builtins/system-config/system-config.addon.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CEUwB91M.js");
+const require_dist = require("../../dist-CNxDnJwz.js");
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/system-config/system-config.addon.mjs

@@ -1,4 +1,4 @@
-import { Jt as BaseAddon, dn as hydrateSchema, qt as errMsg } from "../../dist-BTJq0ddi.mjs";
+import { Jt as BaseAddon, dn as hydrateSchema, qt as errMsg } from "../../dist-CLFBZQH6.mjs";
 //#region src/builtins/system-config/system-config.addon.ts
 /**
 * Built-in `system-config` addon — Phase 4 of the settings redesign.

package/dist/builtins/winston-logging/index.js

@@ -3,7 +3,7 @@ Object.defineProperties(exports, {
 	[Symbol.toStringTag]: { value: "Module" }
 });
 const require_chunk = require("../../chunk-Cek0wNdY.js");
-const require_dist = require("../../dist-CEUwB91M.js");
+const require_dist = require("../../dist-CNxDnJwz.js");
 const require_formatter = require("../../formatter-DqAKDlvN.js");
 let node_path = require("node:path");
 node_path = require_chunk.__toESM(node_path);

package/dist/builtins/winston-logging/index.mjs

@@ -1,4 +1,4 @@
-import { Jt as BaseAddon, ht as logDestinationCapability } from "../../dist-BTJq0ddi.mjs";
+import { Jt as BaseAddon, ht as logDestinationCapability } from "../../dist-CLFBZQH6.mjs";
 import { t as formatLogLine } from "../../formatter-B7qW8bPJ.mjs";
 import * as path$1 from "node:path";
 import path from "node:path";

package/dist/{dist-BTJq0ddi.mjs → dist-CLFBZQH6.mjs}

@@ -26326,6 +26326,59 @@ var IdentitySampleInfoSchema = z.object({
 	deviceId: z.number().int().optional(),
 	base64: z.string().optional()
 });
+/**
+* One enrolled sample, judged against the gallery it lives in.
+*
+* The gallery is the one input to recognition nobody re-reads: a sample
+* enrolled from the wrong face keeps voting forever, and because the matches it
+* pulls then look confident, nobody goes back. The 2026-09-08 audit found
+* exactly one such pair on this cluster — a sample scoring 0.61 against three
+* samples of ANOTHER person, enrolled from the same camera in the same minute,
+* where every other cross-identity pair sits under 0.50.
+*/
+var IdentitySampleAuditRowSchema = z.object({
+	sampleId: z.string(),
+	enrolledAt: z.number().int(),
+	deviceId: z.number().int().optional(),
+	source: z.enum(["detected", "photo"]),
+	/** The enrolled crop's media key, so the panel can show the evidence. */
+	mediaKey: z.string().optional(),
+	/**
+	* False = the sample is stamped with a DIFFERENT face model, and a cosine
+	* across feature spaces is a well-formed float with no meaning. Every number
+	* below then says nothing — it must read as "cannot say", never as an
+	* accusation and never as a clean bill: this list ends in a Remove button.
+	*/
+	comparable: z.boolean(),
+	/** Mean cosine against this person's other samples. Null when there are none
+	*  to compare with — never 0, which would read as "opposite". */
+	selfMean: z.number().nullable(),
+	/** The other person this sample looks most like, when it looks like one.
+	*  This is the half that convicts: not looking like yourself can be a hard
+	*  angle; looking like someone the gallery can NAME is a mis-enrolment. */
+	bestForeign: z.object({
+		identityId: z.string(),
+		name: z.string(),
+		score: z.number()
+	}).optional(),
+	/** 0 = nothing to say. Higher = look at this one sooner. */
+	suspicion: z.number()
+});
+var IdentitySampleAuditSchema = z.object({
+	identityId: z.string(),
+	name: z.string(),
+	/** The cluster face model every comparison was made in. */
+	modelId: z.string(),
+	totalSamples: z.number().int(),
+	comparableSamples: z.number().int(),
+	flagged: z.number().int(),
+	/** The bar `flagged` counts against, so the panel states the RULE and not
+	*  only its current result. */
+	flagThreshold: z.number(),
+	/** Worst first. A row with nothing to say still appears, at the bottom: the
+	*  operator asked to see the gallery, not only its accusations. */
+	rows: z.array(IdentitySampleAuditRowSchema).readonly()
+});
 var FaceInfoSchema = z.object({
 	faceId: z.string(),
 	deviceId: z.number().int(),
@@ -26487,6 +26540,19 @@ includeCrops: z.boolean().optional() }).optional(), z.array(IdentitySchema).read
 			auth: "admin"
 		}),
 		listIdentitySamples: method(z.object({ identityId: z.string() }), z.array(IdentitySampleInfoSchema).readonly()),
+		/**
+		* Re-analyse ONE person's enrolled samples against the whole gallery.
+		*
+		* A pure read — no write, no inference, just dot products over vectors the
+		* hub already holds (327 of them on this cluster). `admin` for the same
+		* reason `listIdentitySamples` is: the answer names every enrolled person
+		* and how well one person's samples match them, which is the gallery's
+		* shape and not a viewer-level fact.
+		*
+		* Removal deliberately stays `removeSample`: an analysis that could also
+		* delete would be one confirmation away from emptying a gallery.
+		*/
+		auditIdentitySamples: method(z.object({ identityId: z.string().min(1) }), IdentitySampleAuditSchema, { auth: "admin" }),
 		removeSample: method(z.object({
 			identityId: z.string(),
 			sampleId: z.string()
@@ -37576,6 +37642,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"faceGallery.auditIdentitySamples": {
+		capName: "face-gallery",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"faceGallery.createIdentity": {
 		capName: "face-gallery",
 		capScope: "system",

package/dist/{dist-CEUwB91M.js → dist-CNxDnJwz.js}

@@ -26326,6 +26326,59 @@ var IdentitySampleInfoSchema = zod.z.object({
 	deviceId: zod.z.number().int().optional(),
 	base64: zod.z.string().optional()
 });
+/**
+* One enrolled sample, judged against the gallery it lives in.
+*
+* The gallery is the one input to recognition nobody re-reads: a sample
+* enrolled from the wrong face keeps voting forever, and because the matches it
+* pulls then look confident, nobody goes back. The 2026-09-08 audit found
+* exactly one such pair on this cluster — a sample scoring 0.61 against three
+* samples of ANOTHER person, enrolled from the same camera in the same minute,
+* where every other cross-identity pair sits under 0.50.
+*/
+var IdentitySampleAuditRowSchema = zod.z.object({
+	sampleId: zod.z.string(),
+	enrolledAt: zod.z.number().int(),
+	deviceId: zod.z.number().int().optional(),
+	source: zod.z.enum(["detected", "photo"]),
+	/** The enrolled crop's media key, so the panel can show the evidence. */
+	mediaKey: zod.z.string().optional(),
+	/**
+	* False = the sample is stamped with a DIFFERENT face model, and a cosine
+	* across feature spaces is a well-formed float with no meaning. Every number
+	* below then says nothing — it must read as "cannot say", never as an
+	* accusation and never as a clean bill: this list ends in a Remove button.
+	*/
+	comparable: zod.z.boolean(),
+	/** Mean cosine against this person's other samples. Null when there are none
+	*  to compare with — never 0, which would read as "opposite". */
+	selfMean: zod.z.number().nullable(),
+	/** The other person this sample looks most like, when it looks like one.
+	*  This is the half that convicts: not looking like yourself can be a hard
+	*  angle; looking like someone the gallery can NAME is a mis-enrolment. */
+	bestForeign: zod.z.object({
+		identityId: zod.z.string(),
+		name: zod.z.string(),
+		score: zod.z.number()
+	}).optional(),
+	/** 0 = nothing to say. Higher = look at this one sooner. */
+	suspicion: zod.z.number()
+});
+var IdentitySampleAuditSchema = zod.z.object({
+	identityId: zod.z.string(),
+	name: zod.z.string(),
+	/** The cluster face model every comparison was made in. */
+	modelId: zod.z.string(),
+	totalSamples: zod.z.number().int(),
+	comparableSamples: zod.z.number().int(),
+	flagged: zod.z.number().int(),
+	/** The bar `flagged` counts against, so the panel states the RULE and not
+	*  only its current result. */
+	flagThreshold: zod.z.number(),
+	/** Worst first. A row with nothing to say still appears, at the bottom: the
+	*  operator asked to see the gallery, not only its accusations. */
+	rows: zod.z.array(IdentitySampleAuditRowSchema).readonly()
+});
 var FaceInfoSchema = zod.z.object({
 	faceId: zod.z.string(),
 	deviceId: zod.z.number().int(),
@@ -26487,6 +26540,19 @@ includeCrops: zod.z.boolean().optional() }).optional(), zod.z.array(IdentitySche
 			auth: "admin"
 		}),
 		listIdentitySamples: method(zod.z.object({ identityId: zod.z.string() }), zod.z.array(IdentitySampleInfoSchema).readonly()),
+		/**
+		* Re-analyse ONE person's enrolled samples against the whole gallery.
+		*
+		* A pure read — no write, no inference, just dot products over vectors the
+		* hub already holds (327 of them on this cluster). `admin` for the same
+		* reason `listIdentitySamples` is: the answer names every enrolled person
+		* and how well one person's samples match them, which is the gallery's
+		* shape and not a viewer-level fact.
+		*
+		* Removal deliberately stays `removeSample`: an analysis that could also
+		* delete would be one confirmation away from emptying a gallery.
+		*/
+		auditIdentitySamples: method(zod.z.object({ identityId: zod.z.string().min(1) }), IdentitySampleAuditSchema, { auth: "admin" }),
 		removeSample: method(zod.z.object({
 			identityId: zod.z.string(),
 			sampleId: zod.z.string()
@@ -37576,6 +37642,12 @@ var METHOD_ACCESS_MAP = Object.freeze({
 		addonId: null,
 		access: "create"
 	},
+	"faceGallery.auditIdentitySamples": {
+		capName: "face-gallery",
+		capScope: "system",
+		addonId: null,
+		access: "view"
+	},
 	"faceGallery.createIdentity": {
 		capName: "face-gallery",
 		capScope: "system",

package/dist/index.js

@@ -1,6 +1,6 @@
 Object.defineProperty(exports, Symbol.toStringTag, { value: "Module" });
 const require_chunk = require("./chunk-Cek0wNdY.js");
-const require_dist = require("./dist-CEUwB91M.js");
+const require_dist = require("./dist-CNxDnJwz.js");
 const require_builtins_alerts_alerts_addon = require("./builtins/alerts/alerts.addon.js");
 require("./builtins/alerts/index.js");
 const require_formatter = require("./formatter-DqAKDlvN.js");

package/dist/index.mjs

@@ -1,5 +1,5 @@
 import { a as __toCommonJS, i as __require, n as __esmMin, o as __toESM$1, r as __exportAll, t as __commonJSMin$1 } from "./chunk-CNf5ZN-e.mjs";
-import { A as addonSettingsCapability, Ct as objectInputDeclaresAddonId, Et as procedureAuthKey, Nt as scopesAllowAddon, Pt as scopesAllowDeviceCap, Xt as DEVICE_SETTINGS_CONTRIBUTION_METHODS, Yt as DATAPLANE_SECRET_HEADER$1, Zt as DEVICE_STATUS_METHOD, _ as RUNTIME_DEFAULTS, _n as resolveCapMount, _t as looseSchema, an as asNumber, at as isCollectionArrayMethod, bn as EventCategory$1, cn as emitDownForOwnedCaps, dt as kebabToCamel, et as extractNestedAddonId, gn as readinessKey, gt as logLevelAtMost, h as METHOD_ACCESS_MAP, hn as parseJsonUnknown, in as asJsonObject$1, it as isArrayOutputSchema, jt as resolveMethodAuth, mn as parseJsonObject, nn as ReadinessTimeoutError, on as asString$1, p as LOG_LEVEL_RANK, pt as lifecycleJobSchema, qt as errMsg$1, sn as createEvent, st as isObjectInput, t as ALL_CAPABILITY_DEFINITIONS, tn as ReadinessRegistry, un as expandCapMethods, ut as isVoidInput, vn as scopeKey } from "./dist-BTJq0ddi.mjs";
+import { A as addonSettingsCapability, Ct as objectInputDeclaresAddonId, Et as procedureAuthKey, Nt as scopesAllowAddon, Pt as scopesAllowDeviceCap, Xt as DEVICE_SETTINGS_CONTRIBUTION_METHODS, Yt as DATAPLANE_SECRET_HEADER$1, Zt as DEVICE_STATUS_METHOD, _ as RUNTIME_DEFAULTS, _n as resolveCapMount, _t as looseSchema, an as asNumber, at as isCollectionArrayMethod, bn as EventCategory$1, cn as emitDownForOwnedCaps, dt as kebabToCamel, et as extractNestedAddonId, gn as readinessKey, gt as logLevelAtMost, h as METHOD_ACCESS_MAP, hn as parseJsonUnknown, in as asJsonObject$1, it as isArrayOutputSchema, jt as resolveMethodAuth, mn as parseJsonObject, nn as ReadinessTimeoutError, on as asString$1, p as LOG_LEVEL_RANK, pt as lifecycleJobSchema, qt as errMsg$1, sn as createEvent, st as isObjectInput, t as ALL_CAPABILITY_DEFINITIONS, tn as ReadinessRegistry, un as expandCapMethods, ut as isVoidInput, vn as scopeKey } from "./dist-CLFBZQH6.mjs";
 import { AlertCenterAddon } from "./builtins/alerts/alerts.addon.mjs";
 import "./builtins/alerts/index.mjs";
 import { t as formatLogLine } from "./formatter-B7qW8bPJ.mjs";

package/dist/{retired-settings-keys-BZZPFp77.mjs → retired-settings-keys-BQydEL_M.mjs}

@@ -1,4 +1,4 @@
-import { in as asJsonObject } from "./dist-BTJq0ddi.mjs";
+import { in as asJsonObject } from "./dist-CLFBZQH6.mjs";
 //#region src/builtins/sqlite-storage/retired-settings-keys.ts
 /**
 * Is THIS node the one whose settings store is the cluster's authority?

package/dist/{retired-settings-keys-DtPZcaQ_.js → retired-settings-keys-D9wnrXOC.js}

@@ -1,4 +1,4 @@
-const require_dist = require("./dist-CEUwB91M.js");
+const require_dist = require("./dist-CNxDnJwz.js");
 //#region src/builtins/sqlite-storage/retired-settings-keys.ts
 /**
 * Is THIS node the one whose settings store is the cluster's authority?

package/package.json

@@ -1,6 +1,6 @@
 {
   "name": "@camstack/system",
-  "version": "1.2.207",
+  "version": "1.2.209",
   "description": "Core addon for CamStack — builtins, pipeline, process management, auth, logging, events",
   "keywords": [
     "camstack",